ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30 | Triage

Sharing

General

Target

ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30
Size

62KB
MD5

e5ee54a39dfd85d2a84f2f9b3339a1ed
SHA1

e9ee7b2a729bc375c42ac016683c1855cca1dd84
SHA256

ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30
SHA512

998effda9642bc08c24c492daf3ede3738ad41c058fa2b7eb34c93a8c64f265b9941cb23575a37c8a3dbd413539a664b81fe6e06798bcac51e98581064b61a98
SSDEEP

1536:zbPMSzSOYSkIFB7YvSnJTRoXv6v8Gp3ESOA/g4V:zt2OYbIFpY6nJayTqSOAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30

Files

ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30
.exe windows:4 windows x86 arch:x86

1d618d430daeaa46d421060d5d2d5278

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
RtlFillMemory
SetConsoleCursorInfo
RegisterWaitForSingleObject
GetPrivateProfileStructW
timeBeginPeriod
CreateSymbolicLinkTransactedA
WerpLaunchAeDebug
GetFileAttributesTransactedW
InvalidateConsoleDIBits

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE